Data Policy

1. Data Controller

Geo Sprachen- und Beratungsservice

Email: Service@geo-sprachen.de

2. Categories of Data Processed

Data you provide:

• Reflection entries, notes, answers, and personal insights
• Life concepts, milestone plans, and summaries
• Email address (if used for communication or account access)

Automatically processed data:

• Device information (e.g. operating system)
• Basic usage data (e.g. app interactions, error logs)

AI-processed data:

User answers are sent to the OpenAI API through the App’s server-side integration to generate summaries.

3. Purpose of Processing

We process personal data to:

• provide the App’s functionality
• generate summaries and reflections
• send reminders or check-in communications (if enabled)
• ensure technical stability and security
• measure App usage through Google Analytics

4. Legal Basis (GDPR)

Data processing is based on:

• Art. 6(1)(b) GDPR - performance of contract
• Art. 6(1)(a) GDPR - consent (e.g. AI features, emails)
• Art. 6(1)(f) GDPR - legitimate interests (security, improvement)

5. Data Storage and Location

The App’s primary database is hosted by DigitalOcean in Frankfurt, Germany. This database location does not mean that all processing by service providers takes place in Germany.

6. Data Sharing

The App uses the following service providers:

• DigitalOcean for primary database hosting
• OpenAI for AI-supported summaries of user answers
• Google Analytics for usage measurement
• Firebase for crash reporting

7. Data Retention

Personal data is retained:

• as long as your account is active, or
• until you request deletion, or
• as required by law

You can delete your account and all associated data at any time directly in the App under Profile → Security → Delete Account. Deletion is immediate and permanent. If you no longer have access to the App, e-mail Service@geo-sprachen.de from the address registered to your account. See also How to delete your account.

8. Your Rights

You have the right to:

• access your data
• rectify inaccurate data
• request deletion
• restrict processing
• receive personal data you provided in a machine-readable format and transmit it to another controller, where processing is automated and based on consent or a contract
• object, for reasons relating to your particular situation, to processing based on legitimate interests
• withdraw consent at any time
• lodge a complaint with a supervisory authority

These rights apply subject to the conditions of the GDPR. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

Requests can be sent to Service@geo-sprachen.de.

9. Security Measures

We implement appropriate safeguards, including:

• encryption in transit
• secure server access
• restricted internal access

No system is completely secure, but we take reasonable measures to protect your data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available within the App.

11. Contact

Email: Service@geo-sprachen.de